Block IP Addresses

[Yasaman]

Hi,

I am hardy consider to know that how would be possible to block some IPs in a network? shall I block the IPs using firewall, if I'm right how should I use with API? I'm new with this topic, but I will appreciate your answer to inform me.

Thanks

[harmesh88]

Dear ,

You have to create one Network Group and Add all IP on it and block by creating firewall policy .

If you need to block Geo location also you can add multiple Geo location in Policy and block it . 

[Yasaman]

thanks @harmesh88 for your reply. but the problem is, how would be possible to block IPs dynamically? because IPs would show up by a external software and I have to give this IP list to firewall via firewall's API. but I don't know how it works.!!!

[tioeudes · Accepted solution]

You can get dynamic ip lists by using these APIs, if they're available for you

https://docs.fortinet.com/document/fortigate/6.2.2/new-features/98756/fabric-connectors.

I don't know any other way to do that...

regards,

tioeudes

[paul047]

Hi Harmesh88, 
How can I create a group , can you give some steps ? I use FortiManager to manage multiple Firwalls.